server/next.config.mjs at main · EndlessPixel/server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
/**@type{import('next').NextConfig}*/
const nextConfig = {
    async headers() {
        return [{
            source: '/:path*',
            headers: [{
                key: 'Content-Security-Policy',
                value: [
                    "default-src 'self'",
                    "img-src 'self' data: https:",
                    "script-src 'self' 'unsafe-inline' https://discord.com https://www.googletagmanager.com https://static.cloudflareinsights.com",
                    "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
                    "font-src 'self' https://fonts.gstatic.com",
                    "connect-src 'self' https://discord.com https://*.vercel.app https://api.github.com https://avatars.githubusercontent.com https://api.mcsrvstat.us https://cloudflareinsights.com https://uapis.cn",
                    "object-src 'none'",
                    "frame-src 'self' http://wiki.epmc.top https://player.bilibili.com",
                    "base-uri 'self'",
                    "form-action 'self'"
                ].join('; ')
            }, {
                key: 'X-Frame-Options',
                value: 'DENY'
            }, {
                key: 'X-Content-Type-Options',
                value: 'nosniff'
            }, {
                key: 'Referrer-Policy',
                value: 'strict-origin-when-cross-origin'
            }, {
                key: 'Permissions-Policy',
                value: 'camera=(), microphone=(), geolocation=()'
            }]
        }];
    },
    images: {
        remotePatterns: [{
            protocol: 'https',
            hostname: 'avatars.githubusercontent.com'
        }, {
            protocol: 'https',
            hostname: '*.vercel.app'
        }]
    },
    reactStrictMode: true,
};

export default nextConfig;